I wanted to clarify on on our general list that we shouldn't tell folks that "Log4j is not actively maintained any more." In my opinion, it gives people the impression that there will be no further releases, and we haven't made that decision as a group.
Feel free to tell people that development efforts are focused on log4j2, but please don't give folks the impression log4j will no longer be updated. If there's a good enough reason to push another log4j release, I don't see why we wouldn't do it. Thanks Scott